CVE-2019-5770

Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

The vulnerability of the vgaDrawText function in the QEMU hardware emulation software allows a hacker to trigger a service failure.

The vulnerability of the vgaDrawText function in the QEMU hardware emulation software is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2019-5916

Input validation issue in POWER EGGVer 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2.3 Patch 9 and earlier, Ver 2.4 Patch 13 and earlier, Ver 2.5 Patch 12 and earlier, Ver 2.6 Patch 8 and earlier, Ver 2.7 Patch 6 and earlier, Ver 2.7 Governme...

CVE-2019-5916

CVE-2019-5916 concerns an input validation issue in POWER EGG (versions listed in the record, e.g., 2.0.1, 2.02 Patch 3 and earlier, up to 2.9 Patch 4 and earlier) that allows remote attackers to execute an EL expression on the server via unspecified vectors. The affected software is POWER EGG by...

CVE-2018-0386

A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on an affected system. The vulnerability is due to improper validation of input that is passed to the affected software. An attacker...

UBUNTU-CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

CVE-2018-10952

In 2345 Security Guard 3.7, the driver file 2345BdPcSafe.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222088...

Exploit for Improper Input Validation in Drupal

IMPORTANT: Is provided only for educational or information p...

Advanced SystemCare Ultimate Denial of Service Vulnerability (CNVD-2018-07113)

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which originates...

Input validation

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin7x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000...

CVE-2018-9006

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin7x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004...

CVE-2018-6627

In WatchDog Anti-Malware 2.74.186.150, the driver file ZAMGUARD32.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054...

NetGain Enterprise Manager File Upload Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. A remote code execution vulnerability exists in the org.apache.jsp.u.jsp.db.save005fimagejsp servlet in NetGain Enterprise Manager, which originates from a process that fails to...

CVE-2017-8713

CVE-2017-8713 refers to a Hyper-V information disclosure vulnerability in Windows Hyper-V component. Affected products include Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (various builds: Gold, 1511, 1607, 1703), and Windows Server 2016. The issue arises when Hyper-V fails to properly ...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2017-32916)

Microsoft Windows and Windows Server are both products of Microsoft Corporation.Windows is a family of operating systems.Windows Server is a family of server operating systems.Hyper-V is one of the virtualization products. A denial of service vulnerability exists in the Hyper-V component of...

CVE-2016-2965

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious link, a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846...

CVE-2017-6788

The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected software. The vulnerability is due to insufficient input...

MGASA-2017-0159 Updated libtasn1 packages fix security vulnerability

Jakub Jirasek of Secunia Research discovered that libtasn1 did not properly validate its input. This would allow an attacker to cause a crash by denial-of-service, or potentially execute arbitrary code, by tricking a user into processing a maliciously crafted assignments file CVE-2017-6891...

SUSE-SU-2017:1473-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service bsc1039514 - CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service bsc1039515 - IKEv1 protocol is vulnerable to DoS...

SUSE-SU-2017:1471-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service bsc1039514 - CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service bsc1039515...